7 papers
Mitigating Taint-Style Vulnerabilities in MCP Servers via Security-Aware Tool Descriptions
Yang Shi, Jiaheng Fu, Yihe Huang +3
Large language models (LLMs) are increasingly deployed as autonomous agents that interact with external tools and services via the Model Context Protocol (MCP), a standardized inte…
Bridging Generation and Training: A Systematic Review of Quality Issues in LLMs for Code
Kaifeng He, Xiaojun Zhang, Peiliang Cai +7
Large language models (LLMs) frequently generate defective outputs in code generation tasks, ranging from logical bugs to security vulnerabilities. While these generation failures…
TigAug: Data Augmentation for Testing Traffic Light Detection in Autonomous Driving Systems
You Lu, Dingji Wang, Kaifeng Huang +2
Autonomous vehicle technology has been developed in the last decades with recent advances in sensing and computing technology. There is an urgent need to ensure the reliability and…
Lifting the Veil on Composition, Risks, and Mitigations of the Large Language Model Supply Chain
Kaifeng Huang, Bihuan Chen, You Lu +7
Large language models (LLMs) have sparked significant impact with regard to both intelligence and productivity. Numerous enterprises have integrated LLMs into their applications to…
Killing Two Birds with One Stone: Malicious Package Detection in NPM and PyPI using a Single Model of Malicious Behavior Sequence
Junan Zhang, Kaifeng Huang, Yiheng Huang +4
Open-source software (OSS) supply chain enlarges the attack surface, which makes package registries attractive targets for attacks. Recently, package registries NPM and PyPI have b…
LLMs Meet Library Evolution: Evaluating Deprecated API Usage in LLM-based Code Completion
Chong Wang, Kaifeng Huang, Jian Zhang +4
Large language models (LLMs), pre-trained or fine-tuned on large code corpora, have shown effectiveness in generating code completions. However, in LLM-based code completion, LLMs…